Written to be used in test mode/signed

A kernel driver with functions to detect modifications to RX memory in usermode processes. Observes pages that have undergone COW which indicates text sections that have been written to.